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ABSTRACT 


The min:mal cut lower bound for k-out-of-n systems is computed and 
compared witth the true reliability of these systems. The size of the 
system, n, :s increased; and selected desrees of system complexity, 

k/n, are studied. The resulting graphs cf system reliability versus 
component reliability indicate that both size and complexity cause a 
deterioration of the approximation, but they also indicate tnat there 

is a limit to this deterioration, The minimal cut lower bound is then 
examined, theoretically, as the size of the system increases to infini-iy; 


Emde thne lam: ts of detervoration are obtained, 
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f.  JNTRODUCTION 


Reliability, the probability that a device will accomplish the 
mission fox which it was designed, has become increasingly more difficult 
to compute as devices have become larger and more complex, It is often 
not feasible, even with the use of large computers, to calculate the 
actual reliability of relatively simple systems. When systems such as: 
the Apollo mooncraft are considered, then clearly the task becomes 
formidable, if not impossible. Knowledge of the reliability of such 
systems, hcwever, is vitally important. 

To compensate for this inability to compute actual system reliability, 
certain methods for approximating reliability have been developed. 
Usually, trese approximations tend to place lower or upper bounds on ithe 
actual reliability and to become arbitrarily close as the performance 
probability of the components increases to unity. In many cases, 
however, much analysis remains to be done to determine the strengths 
and weaknesses of these approximations, 

While the reliability of a k-out-of-n system can be found directly 
and needs no approximation, the study of such systems will allow the 
characteristics of the minimal cut lower bound method of approximating 
reliability to be thoroughly analyzed. This paper will conduct such an 


analysis. 





II, BACKGROUND AND DISCUSSION 


A, DEFINITIONS 

Reliability is usually thought of as being time dependent; that is, 
it is the probability that a device functions properly over the interval 
fost). implicit in the definition of remiability isuthesassmumption that 
the system or device has two states: success or failure. Birnbauw, 
Esary, and 3jaunders [2] refer to this dezinition as "dichotomic 
reliability," Throughout this paper use of the term reliability will 
imply dichotomic reliability. This same assumption will also be.used 
when referring to components and their performance probabilities, 

A systen is said to be in logical sexies if and only if all components 
of the syst2m must perform in order that the system can function. 

A systen is in logical parallel if and only if at least one component 


must perforn in order for the system to verforn, 


B, k-OUT-OF-n SYSTEMS 

The k-out-of-n system was chosen because it is often found in 
practice, and the true reliability of such a system is easily computed 
or acquired from tables, This type of system functions when at least 
k of its n components perform properly and fails otherwise. Examples 
of such a system would include a suspension bridge which needs at 
least k of its n cables to remain standing; or a cable consisting of 
n wires, k of which are vital to support the maximum load. It is har«a 
to conceive of such a system in which the n components would not be 


identical, and this assumption is usually made. The assumption is also 





made that a component either performs properly or fails completely, 
and that this action is independent of all other components, Thus, the 
reliability of such systems, Ro» can be obtained by using the equatior 
for the cumulative binomial probability distribution 

en kt n-.<! : 
= eet p (1-p) . Cis) 

ktok 

Where p is the probability that the individual components perform 
properly. The reliability can also be odtained from numerous cumulative 
binomial tables covering a wide range of values for k, n, and p.. If ell 
components were not identical and independent, then equation (II-B-1) 


would not hold and all possible combinations of k components would 


beave to be enumerated, 


C. MINIMAL CUT LOWER BOUND 
In every system of n components there is a group of components 
_—_e—— eS ar Sr Pa SERS en teperereeneepaetet> 


Waeh, bY mre bY Peniorming, insures that the system 7 insures that the system performs, This group 


or set of components is called a "path" of ystem,. Depending on 


the redundancy built into the system, the total number of paths possitle 
can vary widely; and each path can contain from 1 to n components. 
ponents whose performance is absolutely essential to the functioning of 
the system. This set of components is called a "minimal path set." 
Esary and Proschan (4], in a more formal definition, describe a_minimal 
path Set as 2 path of wien no proper Subset 25 a's0 2 pate 

In a similar fashion, there are within a system certain sets, 


consisting of a minimal group of components, whose failure would cause 





the system to fail, Each of these sets would be called a "minimal cut 
ng a ey 





Seve s in Order for One of these minimal cut sets to fail, all the 
re En eee eS a EY 


components velonzing to that set must fail. This means that the minimal 


cut set can be thought of as forming a parallel structure or a sub- 


Ta 








—— = er er CP OOP OP: + 


system with all its components arranged in ‘Parallel. Since there can 


OTD IO UNC cea at oe tas n Pct, hea eS. wae a CDSE ee Peete cd meat inl” NED ap 


be more than one Minimal cut set in a sy3tem, it is entirely possible, 
and even likely, that a particular compojent could appear in several cf 


these sets, The failure of any one of tae minimal out sets is sufficient 





to fail the system; therefore, the collestion of cut sets can be thought 





of as forming a series structure. 
eae. ee | 





In the k-out-of-n systems, there are k components in a minimal 
2 ee ae 
path set, which means that (n-k) components could fail without affecting 
eng 
the performance of the system, Failure of one more, however, would 


cause the system to fail. Therefore, there are (n-k+1) components ee 


A mieere) cutscet. The total mmber of ninine) cut cote. Adediten, 
—— a a 


simply the number of subsets of size (n-k+1) that can be chosen from 
the set of n components. This quantity is given by: 
ent ee? Se 
n n! 
—_ (II-C-1) 


A physical representation of this structure would be C we cut set 
_ 7 2 eee EE hn ne 


eee 
ll eee 


subsystems in series with each subsystem containing (n-k+1) components 


in parallel. 
_—_—__ 





Example: In a 3-out-of-5 system, a minimal cut set would contain 


n 
(n—k+1), or (5-3+1)=3, components in parallel; and there are Grea: 


5! : 
= 10, different ways to obtain these cut sets. The 


sa 3 = SST 


physical representation would appear as: 





—£@@ m0 si—=“s 


Theoretically, the representation with the minimal cut structures 
in series could be used to compute the reliability of the system. This 


would be sinple and straight forward except when a single component 





appears in nore than one minimal cut structure. Computing this 





reliability would then become a cumbersome task, to say the least. Phys 
issue can be avoided, however, by substituting icentical and independent 
components in place of the repetitions. It is clear, however, that 

such substitutions would make the structire more likely to fail and 
would, in fact, form an upper bound on the probability that the structure 
fails, or a lower bound on the reliability of the system. This type cf 
structure is then used to form the minimal cut lower bound on a systen's 


Poet 





oe of these structures would be connected in series. If p is the 


SS 


probability that an individual component functions properly, then (1p) 
is the probability that it fails. The probability that all components 
of a minimal cut structure for a k-out-of-—n system fail is: 

Cen) geet (iio=>) 


Uy detailed and mathematical proof of the validity of the minimal 
cut lower bound is given by J. D. usary and fF. Proschan in [3]. 





The probability that the cut structure does not fail, its iefeWa Hee leyalsl Salete 


is given by 


1oaNGep) can (II-C-3) 


Since there are (te cut structures in series, the approximate 
ee ee ee a 
reliability of the systen, Ros using the minimal cut lower bound then 


becomes: 


New 


2 
@) WwW 


R= [1 - (1p) 1] Oe (aioe) 


ren) 


Equation (Ii-C~4) now represents the basic equation for computing the 
minimal cut lower bound for any k-out-of-n system with identical and 
independent components. 

For the logical series or logical parallel systems, the equation 
for the min‘mal cut lower bound reduces to an equation which computes 
the system's true reliability. This should be obvious, since each 
component is a minimal cut set in a logical series system; and in the 
logical parallel system, all the components form one minimal cut set. 
This fact can be seen in an elementary way by substituting into the 
two equations (II-B-1) and (II-C-4) the value k = n for the series 
system and k = 1 for the parallel system. The two equations would 


reduce to: 
(a) series system (k =n) R_=R =p , (II-C-5) 


(b) parallel system (k= 1) R,=R,=1- (ita (Tioa5) 


The minimal cut lower bound is, there i Lon 
in the two extreme cases of the logical series or Jogical parallel 


systems; bu: how good is the approximation between these two limits? 


LO 





III. NATURE OF THE ANALYSTS 


A. THE PROBLEM 

The theoretical interest of the bounds is that they offer the mez.ns 
in reliab: lity studies of approximating structures having complex 
component arrangements with structures having only series and parallel 
arrangements. The practical interest cf the bounds is that they can 
be useful for structures having reliability functions tedious to 
evaluate exactly, but whose paths and cuts can_be determined by in- 
Spection. Such structures are quite numerous. 

While the validity of the minimal cut lower bound has been proven, 
much remains to be done to determine just how "useful" it is in the 
practical sense. Is the minimal cut lower bound always a good approxination 
to a system's true reliability? How does the lower bound behave as the 
complexity or the number of components increases? Does the approximation 
depend in amy way on the ratios of comporents in the cut sets to the 
total number of system components? If the minimal cut lower bound is 
not a good approximation, what causes the deterioration? Can the amount 
of deterioration be determined or defined? 

The study of k-out-of-n systems will allow some light to be cast on 


these and related questions and will aid in developing a stronger base 


for theoretical implications. 


B. ANALYSIS TECHNIQUE 
The problem was investigated in the following manner: A base system 
of n=10 components was chosen, and k was allowed to vary from 1 to 10. 


The true system reliability for each value of k was obtained from 


i wee Me ee a es Ss 


Reecor. Jonn Wiley awd Sons, inc., 1 ; 
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A. THE PROBLEM 

The theoretical interest of the bounds is that they offer the mezns 
in reliab: lity studies of approximating structures having complex 
component arrangements with structures having only series and parallel 
arrangements. The practical interest cf the bounds is that they can 
be useful for structures having reliability functions tedious to 
evaluate exactly, but whose paths and cuts can be determined by in- 
Sspection. Such structures are quite numerous. 

While the validity of the minimal cut lower bound has been proven, 
mich remains to be done to determine just how "useful" it is in the 
practical sense. Is the minimal cut Lower bound always a good approxination 
to a systems true reliability? How does the lower bound behave as the 
complexity or the number of components increases? Does the approximation 
depend in any way on the ratios of components in the cut sets to the 
total number of system components? If the minimal cut lower bound is 
not a good approximation, what causes the deterioration? Can the amount 
of deterioration be determined or defined? 

The study of k-out-of-n systems will allow some light to be cast on 


these and related questions and will aid in developing a stronger base 


for theoretical implications. 


B. ANALYSIS TECHNIQUE 
The problem was investigated in the following manner: A base system 
of n=10 components was chosen, and k was allowed to vary from 1 to 10. 


The true system reliability for each value of K was obtained from 


p. 207, John Wiley and Sons, Inc., 1 ‘ 





cumulative binomial tables, rounded off vo four significant decimals, 
and plotted on a gravh of system reliability versus component performance 
probability. (Figure III-C.1) The miniznal cut lower bound for each k 
was then calculated using equation (II-C.-4) on an IBM-360 computer. ‘The 
resulting calculations, rounded off to four significant decimals, were 
plotted on a graph similar to the one above. (Figure III-C.2) Main- 
taining the ratics of k to n established in the base system, the value 
of n was insreased to 20, 40, and 80; and the resulting true system 
reliability and minimal cut lower bound were obtained in the manner 
described above. (See Appendix A for values. ) Due to the size of the 
numbers involved, 80 factorial, it was not feasible to increase the 
value of n past 80. This was not, however, a limiting factor in the 
analysis. 

In order to study the results more closely, k ton ratios of .2, 
-5, and .8 were selected ; and the values of both true reliability and 
the lower bound for these ratios were plotted for each system of size 
n. (See Figures III-C.3, C.4, C.5, C.6.) These four graphs were ther 
used to answer questions raised in part A above and to establish any 


developing trends. 


C. DISCUSSION OF GRAPHS 

The graph of figure III-C.1 was plotted to show the relative "S- 
shapedness" of the k-out-of=n systems and to show the family of curves 
which results as k varies from the logical parallel system to the 
logical series system. The notion of S-shapedness is discussed in 


detail in references [2], [3], and [4]. 





True Reliability of the k-Out-of-10 Systems 
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Component Performance Probability (p) 


Figure III-c.1 


The graph of figure III-C.2 shows the family of curves generated by 
the minimal cut lower bound for the k-out-of-10 systems, The graph 


shows clearly that the lower bound and the true system reliability are 
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Minimal Cut Lower Bound of the k-Out—of—10 systems 
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Of interest 


the same in the logical parallel and logical series system. 
also is the fact that the logical series system is a better approximation 


of the true reliability than the minimal cut lower bound when k=8 and Se 
This phenomenon becomes 


and the value of p is approximately .6 to .8, 
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True Reliabilities and Minimal Cut Approximations 


of the k-Out~of~10 Systems 
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Figure III-c. 3 





more obvious for the n = 20 systems, and then tends to disappear as n 
(See the values listed in the tables of Appendix A.) 


increases further, 
Figure III-C.3 establishes the relationship of the minimal cut lower 


bound to the true system reliability for n=10 and k/n =.2, .5, and .8. 


1) 





True Reliabilities and Minimal Cut Approximations 


of the k-Out-of-20 Systems 
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Component Performance Probability (p) 


Figure III-C.4 


The graph shows that as the k/n ratio increases, higher component per- 
formance probability is required to acheive equally good approximations 
of true reliability. The graph also reveals that as the ratio of k/n 
increases, the actual deviation of the minimal cut lower bound curve from 


the true reliability curve increases and then decreases. 
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True Reliabilities and Minimal Cut Approximations 


of the k-Out-of-40 Systems 
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Figure III-C.5 


Figures III-C.4, C.5, and C.6 show that as the value of n is 
increased, the deviation of the two curves for a certain range of p 


increases, It is also obvious that both types of curves are steepening 
It is known that in the limit as n goes to 


as the value of n increases, 


dure 
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Figure III-C.6 


infinity, the reliability of k-out-of-n systems jumps from 0 to 1 at the 
point where p = k/n; and these graphs suggest that as n increases, the 


minimal cut lower bound may also have some "critical" value of p at which 


it jumps from 0 to 1. It is clear from the graphs that this critical value 


of p (D, aD eritical) is also dependent on the k/n ratio. 
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D, THHORET CAL DISCUSSION 

The graphs of section C above indicate that as the number of com- 
ponents in a system increases, the minimel cut lower bound approaches a 
limit which jumps from 0 to 1 at a critical value, Poe An analytical. 
proof of th:.s characteristic will now be presented, and a solution for 
the value o: Po obtained. 


oe 


The foliowing notation will be used: 


n 
R_ (n5,5p) 7 1 - Gyr") ‘nek ; where n is the number of compon2nts 
in a system; a is the ratio of the number of components in a minimal path 
to the total number of components in the system (a = k/n); and p is the 
performance probability of an individual component, 

L(n) = (3,4) + (nm) denotes the length (number of cut structures in 
series) of the minimal cut structure rep:resentation. 

W(n) = (n-kt+1). W(n) is the width (number of components in parallel) of 
a cut structure, 

é(n,p) = Clo: aaa = (1ep)¥(), 6(n,p) denotes the probability that a 
ewmemstructure will fail. 


Theorem: im R 


n72 hM2%sP) = | it <pe= We 
= 0 ifp<p, 
04 — 
where Dae 1-@ ae +a tae . 


Proof: First, as n-, the reliability of a logical series system 
(wa = 1) is 1 at p=1 and 0 for p<1. (See equation (II-C~5). ) For 
the logical parallel system (@ = 1/n), the reliability as n- © is 0 for 
p= 0 andi for p>0O. (See equation (II-C-6).) Since these two extreme 
systems already satisfy the theorem, only the systems with 1/1 = eee 


Will be considered, 
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Similar.y, strictly reliable (p=1) ard strictly unreliable (p=0) 
components obviously produce strictly reliable (2. (n,o,p) = 1) and 
strictly un:zeliable (R_ (n,%5p) = 0) systems, Again, with the extreme 
values of p already satisfying the theorem, only components with 0 < p < 1 
will be used, 


Note that 


a Ri(n,o,p) = om E = Gap (ae (III-D-1) 
= rs (1 = 6(n,p) EPO , (ITI-D-2) 
Taking logacithms, 
—_ Test R, (nop) re Bou in [1 - 5(n,p) JE) 
ius, 
14m fra R(n,@p)} = 4" u(n) In [1 - 6(n,p)} 
= 12 5m) 6(n,p) BSG, 
Since oo = -leandsoln,p) - 0 as n= = 
th 
; = in R,(n,@,p) sila ae in) 6tne ee (III-D-3) 


The expression for L(n) can be simplified. Observe that 


L(n) 


I 


n n! k n! 
Oeeoe = Gasca C= ~ (n-k+1) (n-k)! k! 


er a ae 
~ (1-9)n+1) ‘n-k Gea? 





a 
where a w~b_ means ae = = 1, Also using Stirling's formula, 
‘i n 
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ns 


Pile ~ n ie (en) , observe that ( a 


= oe 


BOO eee Lee 
ie (n-k)! k! 


aE aE 
n+3 e-T) —— 
n 2 e ( On a 

~~ as ae Se le 


(1-a)n (j-~)n+s ae) 2 (on)? (ome 2 Racers (on)® 


. : =| |. oe (iit) 
(27) n (1-~) o (quae) (1-2) oe | 


Thus, combining equations (III-D-3) and (III-D-4), 

















el 


— 


Pa) 


7 1 | = 
L(n) ~ ({-2) fo n Tay | record 


where 


A(z) = 2S ——————— 
(2n)* (1-0) 3/2 


The limit of the function can now be expressed as: 


lim 


{In R_(n,a,p)} = - ae ACc) ; ‘ 6(n, 
noo (1%?) re Pos (n,p) 


lim Ala 4 


lim Atla 


== 1 ee (1-o)n 9 
= [Gatene| 


where A'(w) = (i-p) A(a). 


ea 





Now, 


ait 1i - 
n-7o {1n R_(n,o%,p)} = Sek x (Le , CORES) 
n (1-2) 7 
1-7) 
ra 1-p ( 
let? (emp) = Un. 
(1-c) Se i6 
f lim 
If Ka,p) <1, then clearly |, {in RL(r,0,p)} > 0. 
Tet Xa,p) lic then ee Ocean. =, and 
n 
1; 
-. {in R, (n,%,p) } cc ® er ae Oe a(a,p) > ‘ac then 
: n : 
_ ar(o) Okeypd = ome AN (a) =p 2 Lon A' (q)———- 
He 2 


nel gl n-*< 
[xen7 | 
. " nl 
since 3" n Q(a,p)™ 70, then BE arfo) Myr 6 
nT n-<? ae 


by the comparison test. 
From the preceding arguments, the limiting behavior of R_ (np) 


depends on whether 6(c,p) <1 or 6(0,p) > 1. The inequality, 


is equivalent to 


Eee (eo)! = ioe yO ap. Gar=n-6) 


ee 


” Staal, 





The proof can now be summarized in tke following statement: 


j.im 
if p<p,, then |. {1n R,(n,a,p)} = — ® and 


lin lim 
. R, (0525) =O. Ifp2p,, then) {1n R, (1,57) } = 
Pam 


Q.h.D, 
Example: For a k-out-of-n type system, select a k/n ratio of .8. 


The critical value of p is then: 
es glee + gile2 


1 ana Fa 1 e920 


= ,918 . 
Poeene Litit, as n~ © , the minimal cut lower bound is 0 if 
Pe .710 and is j if p = .918. 
The table below gives the critical values of p for some selected 


k/n ratios. 





As stated earlier, it is already known that R_(n,o,p), as n goes to 


infinity, places all of its probability mass at k/n. Figure III-D.1 is, 
then, a graph of the critical values of p for both the true system 
reliability and the minimal cut lower bound, From this figure it can 
be seen that the greatest deviation occurs at a k/n ratio of .3, The 
area between the two curves represents the range of values of p for 
which the minimal cut lower bound is nov a good approximation. This 


graph, of course, is valid only in the limit as n goes to infinity. 


aS 





Critical Values of p for the k-Out-of-n Systems 


/ 
Po for R. , 


Ratio of k/n 





0 02 04 nIe 08 1 


Component Performance Probability (p) 
Figure III-D,1 


A review of figure ITI-C.6 reveals that at n = 80, the minimal cut 
lower bound is already approaching its limiting form. This suggests 


that the lower bound converges to its limit much faster than the true 


system reliability and offers one explanation as to why the logical series 


ah 





system is sometimes a better approximation than the minimal cut lower 
bound. It also suggests that the graph of Po for the lower bound in 


figure III-).1 may have application to some rather modest size systems, 


IV. SUMMARY 


It is important to state once again “hat because the reliability of 
the k-out-of-n system can be found directly and accurately, the minimal 
cut lower bouni for this type of system has no real value. The k-out-of-n 
system does, however, allow a comparison between true relaibility and 
the lower bound to be made; and this comparison offers the opportunity to 
make general statements about the characseristics of the approximation, 

Increasing the size (number abi components) and complexity (number 
of cut sets) of a system causes a rapid deterioration of the minimal cut 
lower bound. Of the two, complexity appears to have a more pronounced 
effect on the approximation. The deterioration does have a limit, 
though; and this limit seems to be reach2d rather quickly. 

In spite of the deterioration of the lower bound noted in this parer, 
the minimal cut lower bound remains a valid approximation, This 
phenomenon can be restated in the following way: If the lower bound 
gives an approximation to the system's reliability that is acceptable, 
then it can be used with confidence. If the approximation is not 
acceptable, then caution should be exercised before rejecting or 


redesigning the system. The system may already be very reliable. 


2? 





APPENDIX A 


Tables of Reliabilities and Approximations 


n= the totel number of components in the systen, 


k = the number of components in a minimal path. 
p = the probability the component functicns properly. 
x n k! n-k! 1 
R. 7 a oF) p (1-p) ~ 
Kak : 
n 
[ ~k+1 1 
R,=|1~ (i-p) Tee) - 


UF: ee obtained from Tables of the Cumulative Binomial Probability 
Distribution, Harvard University Press, 1955; and rounded off to four 
Significant decimals. 


eeees computed on an IBM-360, U.S. Naval Postgraduate School, and 
rounded off to four significant decimals. 
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